← Back

CVE-2024-6107

nvd nist
Published: Jul 21, 2025Modified: Jun 17, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

Due to insufficient verification, an attacker could use a malicious client to bypass authentication checks and run RPC commands in a region. This has been addressed in MAAS and updated in the corresponding snaps.

Affected (5)

Canonical
1 product
Metal As A Service
Configuration A
5 vulnerable
Vulnerable SoftwareAffected Versions
Canonical
Metal As A Service
From 3.1.0 to 3.1.4
Metal As A Service
From 3.2.0 to 3.2.11
Metal As A Service
From 3.3.0 to 3.3.8
Metal As A Service
From 3.4.0 to 3.4.4
Metal As A Service
Version 3.5.0

Related CWEs

CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (1)

Source: security@ubuntu.com
ExploitIssue TrackingPatch

Timeline

No history available yet.